Experience has shown that if the user first installs akmods then does the above in a different order step 3 can be avoided, but all is still required.
The new order would be
- install akmods
sudo dnf install akmods - create and import the key using the steps in the README.secureboot file
a.sudo keygenca -a
b.sudo mokutil --import /etc/pki/akmods/certs/public_key.der - install the driver
sudo dnf install akmod-nvidia - wait for the driver to be compiled & installed (in the background)
- reboot (and complete the mokutil import during the boot)
Note that this actually adds a user enforced delay in step 4 that is hidden in the previous listing by doing step 3 which requires the delay before it completes. It does, however, eliminate the need to perform the akmods --force step
Also note that this process is relevant to a new installation only and that the failure to properly build the modules during a system upgrade (this topic) may only require the
sudo akmods --force --rebuild command. It is assumed that the state of secure boot, creating the signing key, and the key import into the bios would have previously been completed and not altered. This is another case where using the --force option with the keygenca command would cause more headaches than cures.